Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/FcvuA8ScQP0B7o0bIerSP79MWu0.roa
File: FcvuA8ScQP0B7o0bIerSP79MWu0.roa (raw, json)
Hash identifier: cj2nHY5PlyArx9ktRBWZiToSqKQZHlo1o/cNaMyscts=
Subject key identifier: 15:CB:EE:03:C4:9C:40:FD:01:EE:8D:1B:21:EA:D2:3F:BF:4C:5A:ED
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 018D94A544D5E5B0F0B6DE7A34D275D52749
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/FcvuA8ScQP0B7o0bIerSP79MWu0.roa
Signing time: Sat 10 Feb 2024 20:11:15 +0000
ROA not before: Sat 10 Feb 2024 20:11:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210570
IP address blocks: 176.126.127.0/24 maxlen: 24
2a12:7c6:abc::/48 maxlen: 48
2a12:7c6:affe::/48 maxlen: 48
2a12:7c6:c001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Feb 2024 12:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:94:a5:44:d5:e5:b0:f0:b6:de:7a:34:d2:75:d5:27:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Feb 10 20:11:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15cbee03c49c40fd01ee8d1b21ead23fbf4c5aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:2c:a0:a2:d8:bc:da:99:a4:01:9f:c2:3b:
9d:5d:67:9e:de:29:c3:e5:b8:86:31:03:8e:4b:c9:
c5:a7:76:75:0e:56:37:17:2b:90:66:77:67:f1:6c:
2a:89:38:5b:61:b8:18:d2:38:f3:64:cb:d5:b3:0f:
fd:62:1d:cf:8c:33:b2:b8:83:6c:76:d4:6c:15:ca:
22:d5:7c:26:57:a7:a3:19:7a:f8:92:94:51:44:35:
27:98:af:45:97:8e:97:4c:65:d6:2e:5e:5c:b3:60:
ad:9a:c9:50:52:86:15:67:e2:c8:e5:c9:d6:d0:87:
51:86:08:cb:13:2a:58:d0:9d:9a:56:0a:02:88:b7:
3a:8b:5d:ad:04:bf:63:9e:e4:fa:98:84:00:1e:fb:
36:22:69:80:61:d7:90:14:af:86:aa:29:bf:5f:b2:
a5:46:c1:12:d7:28:78:1b:d5:88:8b:38:52:b0:8f:
8e:5c:3a:43:29:ea:e7:67:59:94:12:48:21:3e:da:
e9:68:64:46:0c:98:e0:05:14:62:26:55:88:2c:e7:
f2:bc:e1:0f:61:fd:9a:de:0c:2b:94:ad:7e:cb:20:
25:fe:ea:d2:73:31:08:ce:5f:64:78:84:53:97:f5:
42:a5:7f:f9:0e:cb:2f:e6:35:bd:b1:e3:52:d8:8a:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CB:EE:03:C4:9C:40:FD:01:EE:8D:1B:21:EA:D2:3F:BF:4C:5A:ED
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/FcvuA8ScQP0B7o0bIerSP79MWu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
IPv6:
2a12:7c6:abc::/48
2a12:7c6:affe::/48
2a12:7c6:c001::/48
Signature Algorithm: sha256WithRSAEncryption
c6:fb:29:96:75:69:8f:a7:10:1a:a8:af:53:93:90:d7:53:23:
57:5f:01:7d:ec:a7:dc:4b:65:1e:6e:62:d7:42:5c:fd:a3:23:
40:b9:5c:be:36:5b:8f:6b:ae:72:f0:6f:6b:98:9b:fd:68:d2:
f3:79:74:f5:63:43:d1:39:24:33:58:38:96:28:16:d6:a2:eb:
b9:a8:38:4e:68:f5:4e:6b:10:29:62:38:c0:37:96:df:9f:29:
12:ea:7e:75:26:99:ab:13:20:61:b3:d1:9a:f0:46:05:9e:7e:
86:34:15:87:cb:57:c8:2a:09:09:c0:2c:ff:71:eb:7a:c2:e7:
c0:b8:07:5b:90:6f:fa:cf:13:54:be:3a:10:f6:5a:e9:58:bc:
7f:f6:f5:21:70:8f:4f:f3:a7:ae:e8:73:4b:76:8d:23:1f:ee:
a0:3f:e4:81:9b:c7:47:33:a6:d6:c3:b5:e5:fd:b6:63:a9:0b:
fa:0a:7e:46:b5:77:af:53:09:6c:3e:cd:a4:41:23:cf:18:db:
24:e3:3d:18:1f:57:d3:a2:87:47:eb:1f:11:12:f2:38:6e:ff:
50:23:69:42:8c:d8:17:93:b4:f8:94:04:84:4e:ea:69:d0:41:
3f:79:b3:47:1c:bf:f3:fc:33:94:9d:0c:5a:b1:a3:81:64:f0:
32:62:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org